Security Model, Key Custody, and Backup Guide

Quantum Finance is non-custodial by design. Your private key never touches Quantum servers. Learn how to back up your key and keep your account secure.

Quantum Finance is built on a non-custodial architecture, meaning you — not Quantum Finance — hold the keys to your funds at all times. No Quantum server ever stores or has access to your private key. Understanding how your key is managed and how on-chain operations work helps you trade confidently and recover your account if you ever need to.

How key custody works

Quantum Finance uses Web3Auth for authentication and key management. When you log in, Web3Auth generates and manages your private key using a threshold cryptography scheme. The key is reconstructed in your browser during an active session and is never transmitted to Quantum Finance’s infrastructure.

This means:

• Quantum Finance has zero access to your private key.
• Your key is protected by your login method (Google, email, etc.) and Web3Auth’s network.
• If you lose access to your login method, you can recover using Web3Auth’s backup options.

Smart contract enforcement

All vault operations — deposits, withdrawals, and trade settlements — execute through an auditable smart contract deployed on BNB Smart Chain. There is no manual override or admin backdoor. Every action is enforced by on-chain logic and is publicly visible on BscScan.

This means even Quantum Finance cannot move your funds without a valid on-chain transaction initiated by your wallet.

Back up your private key

NEVER share your private key with anyone. Quantum Finance will NEVER ask for your private key. Anyone who asks for it is attempting to steal your funds.

You can view your private key through the Web3Auth management panel. Store it in a secure, offline location — a hardware wallet, encrypted password manager, or printed and locked away.

1. Open Settings

   Navigate to the Settings tab from the main navigation bar.

2. Find the Security section

   Scroll to the Security & Account section.

3. Open Web3Auth management

   Click Manage next to Web3Auth Management — Backup & Recovery.

4. View your private key

   Your private key is displayed in a security alert dialog. Copy it and store it somewhere safe before dismissing the dialog.

User data storage

Your profile information and trade history are stored in Supabase with encryption at rest. This includes your username, avatar, and historical trade records. Quantum Finance does not store your private key, seed phrase, or any wallet credentials in Supabase.

On-chain transparency

Because Quantum Finance operates on BNB Smart Chain, every on-chain transaction your account initiates is publicly verifiable. You can look up your wallet address on BscScan at any time to independently confirm your transaction history.

Security best practices

Follow these habits to keep your account and funds safe:

• Use a dedicated wallet for trading on Quantum Finance — avoid using a wallet that holds your main holdings.
• Never share your private key, not even with someone claiming to be Quantum Finance support.
• Verify the app URL before logging in each session to avoid phishing sites.
• Back up your private key before you need it — recovery is much harder under pressure.